$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: MkTJc1u7TxJwqoVPzQ7krGBU+zYI41V4pghm6XvI4b8= Subject key identifier: 90:AE:49:B4:9A:D2:2C:C5:77:87:0B:84:75:BB:6E:F6:6C:D2:6B:C9 Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 33BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 97D7 Signing time: Tue 14 May 2024 15:31:52 +0000 Manifest this update: Tue 14 May 2024 15:31:51 +0000 Manifest next update: Tue 21 May 2024 15:31:51 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: 95b245ir5PVsRRCqJ9qZ6ccqN117SgdLuX6hxbGO+l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13246 (0x33be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: May 14 15:31:51 2024 GMT Not After : May 21 15:31:51 2024 GMT Subject: CN=664383e8-3c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:4d:43:7b:32:0c:a2:00:73:15:ab:08:8b: ab:79:bb:51:a5:63:4c:e2:66:67:a5:fd:75:25:07: 15:c5:12:78:cb:29:97:ee:76:6c:04:8f:0f:dc:3b: 27:44:52:fe:c6:f0:39:36:1e:be:89:5e:1f:b1:bb: dc:81:52:2d:fb:02:bd:2b:59:d5:2f:e0:4e:c7:4f: a3:6a:e7:52:d3:28:45:2a:1e:ae:44:23:9e:e8:16: 0f:5b:a9:c1:5d:08:1c:6d:2e:8f:72:7c:f4:da:0e: f2:25:0f:a1:df:12:1c:09:d1:86:f5:da:d9:23:35: 87:25:12:db:ac:4f:76:c1:12:1b:ed:a8:cc:07:9d: e8:0f:7f:3e:77:2f:e5:4b:ff:7b:4f:97:49:ae:d4: 93:3f:9f:2f:23:21:45:93:fb:af:c4:f8:5e:e7:8a: 37:de:1f:c2:5d:27:f6:39:f6:50:7d:90:8d:40:4e: b2:57:4a:eb:ce:16:03:0e:b6:94:91:55:7f:fd:8b: 41:6c:e4:ba:85:c9:a7:e5:92:f4:b0:4f:97:7e:ff: 84:3f:c2:a8:6e:b6:84:6d:87:a7:b4:3c:c4:6b:2a: 20:f4:52:ba:96:65:94:c1:1a:d0:c7:a7:ec:9e:2e: d4:0f:56:00:64:a5:17:ea:6b:6d:41:89:1e:34:41: 4e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AE:49:B4:9A:D2:2C:C5:77:87:0B:84:75:BB:6E:F6:6C:D2:6B:C9 X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e7:60:2a:09:73:ec:0f:e8:a5:16:89:84:86:7d:15:ee:42: 57:8d:66:30:74:dd:9b:63:09:12:2a:8e:6d:95:60:ee:26:30: 94:f1:c4:99:26:e9:42:6e:60:02:49:2d:c6:66:d7:30:14:a9: 30:ee:44:1b:6c:5b:10:8f:d4:98:10:79:8c:14:9b:26:9a:8c: c1:6b:3b:4f:de:46:4b:18:14:c3:04:ce:81:f4:1e:e4:a0:b6: a3:9c:e9:75:5d:a7:2f:77:97:3c:36:0a:58:67:4f:08:e6:57: e8:99:29:97:85:99:80:ba:00:d6:7e:aa:04:49:de:28:ff:9c: 1c:b7:ab:6e:4a:06:51:fe:ad:f2:12:76:8d:01:ea:e8:f1:c6: 6d:fb:fc:23:90:7a:2a:fc:11:b5:3e:a7:5a:59:3d:0e:c9:8e: d2:3f:d9:0f:da:49:81:89:28:ea:14:10:8a:03:5e:e6:04:96: d8:35:ee:f7:0d:42:41:8c:27:be:db:80:ae:0a:fa:e3:7e:4e: bd:6b:62:cd:45:c4:51:80:1a:1a:66:ba:73:06:c0:a5:5f:fa: 66:6f:31:56:2f:2c:0e:b9:bb:ff:60:94:77:99:64:9e:92:84: 7d:05:89:08:98:c8:94:2f:9b:07:e9:fc:18:50:bf:ff:b0:2d: a2:b9:87:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICM74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjQwNTE0MTUzMTUxWhcNMjQwNTIxMTUzMTUxWjAYMRYwFAYD VQQDEw02NjQzODNlOC0zYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy61NQ3syDKIAcxWrCIurebtRpWNM4mZnpf11JQcVxRJ4yymX7nZsBI8P3Dsn RFL+xvA5Nh6+iV4fsbvcgVIt+wK9K1nVL+BOx0+jaudS0yhFKh6uRCOe6BYPW6nB XQgcbS6Pcnz02g7yJQ+h3xIcCdGG9drZIzWHJRLbrE92wRIb7ajMB53oD38+dy/l S/97T5dJrtSTP58vIyFFk/uvxPhe54o33h/CXSf2OfZQfZCNQE6yV0rrzhYDDraU kVV//YtBbOS6hcmn5ZL0sE+Xfv+EP8KobraEbYentDzEayog9FK6lmWUwRrQx6fs ni7UD1YAZKUX6mttQYkeNEFO0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCuSbSa 0izFd4cLhHW7bvZs0mvJMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD52AqCXPsD+ilFomEhn0V7kJXjWYwdN2bYwkSKo5tlWDuJjCU8cSZ JulCbmACSS3GZtcwFKkw7kQbbFsQj9SYEHmMFJsmmozBaztP3kZLGBTDBM6B9B7k oLajnOl1Xacvd5c8NgpYZ08I5lfomSmXhZmAugDWfqoESd4o/5wct6tuSgZR/q3y EnaNAero8cZt+/wjkHoq/BG1PqdaWT0OyY7SP9kP2kmBiSjqFBCKA17mBJbYNe73 DUJBjCe+24CuCvrjfk69a2LNRcRRgBoaZrpzBsClX/pmbzFWLywOubv/YJR3mWSe koR9BYkImMiUL5sH6fwYUL//sC2iuYd8 -----END CERTIFICATE-----Generated at Tue May 14 16:25:27 2024 by rpki-client on console-ams.rpki-client.org